Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa
File:                     70A100D08ED811F09914A14BC4F9AE02.roa (raw, json)
Hash identifier:          ZzS3J/pGs2pu0M1LkdWlVtHcUR8Uu5S0AjyVdXZhGUA=
Subject key identifier:   52:3C:47:D9:3A:8A:F8:C0:CD:D3:F7:CE:5F:A9:38:64:E0:F6:22:69
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       0222
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:58 +0000
ROA not before:           Thu 11 Sep 2025 06:27:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     851
IP address blocks:        103.53.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 03:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Sep 11 06:27:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a481e6-a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:a2:98:0f:65:a3:41:17:3b:d8:8e:2f:c6:
                    a9:b3:b9:a3:42:bf:e7:d5:1e:0d:c8:01:0d:3d:9e:
                    81:94:77:b2:f5:be:d2:28:f5:c4:2c:9e:59:0c:49:
                    d4:aa:52:2b:5e:18:0b:0a:ea:84:85:a2:da:ed:16:
                    0d:f5:36:44:53:7e:82:76:a7:14:3b:a8:8d:2b:bc:
                    1d:0c:f7:f4:2b:03:3a:c2:9f:f3:a3:93:71:43:d9:
                    06:28:be:a2:49:0c:fa:a9:3e:dd:b3:97:bd:3e:d2:
                    f1:e9:56:ac:60:f4:2f:42:04:96:40:9a:45:36:32:
                    59:ea:df:4f:e2:b6:ae:97:10:c3:24:c3:82:e2:a8:
                    13:62:67:41:9e:49:9c:e7:ed:02:2e:1e:77:13:c9:
                    e4:15:6d:43:7c:28:6e:73:a1:ef:b3:85:84:cd:ed:
                    71:dd:cd:d6:d6:95:56:81:f1:33:a8:e2:a2:e9:b9:
                    d0:18:a2:b5:5a:9e:de:72:0d:0c:2c:93:f2:21:af:
                    9c:92:5c:aa:0c:ba:7e:3f:08:28:7e:09:d0:4e:5c:
                    d9:5f:28:77:8d:d1:1b:45:f5:a6:da:a4:84:b2:33:
                    b2:7b:28:22:b8:c3:23:41:50:53:17:8c:14:67:8c:
                    f1:75:8c:68:e8:a9:48:cc:7f:6c:6f:15:54:ec:04:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3C:47:D9:3A:8A:F8:C0:CD:D3:F7:CE:5F:A9:38:64:E0:F6:22:69
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:ae:03:f2:85:59:b7:18:94:20:51:bc:c4:6e:d8:12:54:
         37:62:29:cf:b8:3d:fb:25:94:f9:d4:b4:d4:21:8b:4d:3a:65:
         55:13:49:70:34:b0:f5:b7:ce:08:82:1f:36:22:70:5e:6c:bc:
         fa:9f:dd:71:af:29:1c:96:ee:c0:dd:4c:dc:91:ff:0f:0e:30:
         a4:bb:36:87:2f:31:ed:d7:d5:61:b9:38:42:71:0a:71:df:07:
         aa:6c:24:16:2a:ae:71:60:a9:dc:f7:aa:25:7b:2c:2b:fc:9d:
         de:c4:ac:4f:92:67:7a:fb:27:38:63:2e:e0:76:35:b8:78:c6:
         3d:ab:ad:4c:67:cc:8b:68:64:57:41:5d:cf:d2:2a:22:0c:a3:
         4f:3e:29:4e:76:93:d3:80:6e:89:f6:d9:28:46:cb:44:d6:85:
         c4:85:4c:09:03:e6:d9:d5:19:52:61:b6:59:86:81:b1:02:76:
         a3:a1:fd:10:38:94:8a:bb:81:6b:e4:74:18:c2:bf:af:dc:5f:
         2f:ec:12:44:bf:d3:70:f9:df:ae:ab:8b:25:86:70:a4:b0:86:
         12:bf:2c:62:15:a2:ac:e8:b3:33:46:71:71:86:39:c1:46:13:
         22:31:25:68:84:cb:71:34:f8:13:63:42:b9:f4:87:db:26:7a:
         2a:79:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:15:01 2026 by rpki-client